Vulnerabilities > Google > Critical

DATE CVE VULNERABILITY TITLE RISK
2010-05-28 CVE-2010-2107 Unspecified vulnerability in Google Chrome
Unspecified vulnerability in Google Chrome before 5.0.375.55 allows attackers to cause a denial of service (memory error) or possibly have unspecified other impact via vectors related to the Safe Browsing functionality.
network
low complexity
google
critical
10.0
2010-05-28 CVE-2010-2105 Unspecified vulnerability in Google Chrome
Google Chrome before 5.0.375.55 does not properly follow the Safe Browsing specification's requirements for canonicalization of URLs, which has unspecified impact and remote attack vectors.
network
low complexity
google
critical
10.0
2010-05-03 CVE-2010-1663 Permissions, Privileges, and Access Controls vulnerability in Google Chrome
The Google URL Parsing Library (aka google-url or GURL) in Google Chrome before 4.1.249.1064 allows remote attackers to bypass the Same Origin Policy via unspecified vectors.
network
low complexity
google CWE-264
critical
10.0
2010-04-23 CVE-2010-1505 Permissions, Privileges, and Access Controls vulnerability in Google Chrome
Google Chrome before 4.1.249.1059 does not prevent pages from loading with the New Tab page's privileges, which has unknown impact and attack vectors.
network
low complexity
google CWE-264
critical
10.0
2010-04-23 CVE-2010-1502 Multiple Security vulnerability in RETIRED: Google Chrome prior to 4.1.249.1059
Unspecified vulnerability in Google Chrome before 4.1.249.1059 allows remote attackers to access local files via vectors related to "developer tools."
network
google
critical
9.3
2010-04-01 CVE-2010-1233 Numeric Errors vulnerability in Google Chrome
Multiple integer overflows in Google Chrome before 4.1.249.1036 allow remote attackers to have an unspecified impact via vectors involving WebKit JavaScript objects.
network
low complexity
google CWE-189
critical
10.0
2010-04-01 CVE-2010-1230 Information Exposure vulnerability in Google Chrome
Google Chrome before 4.1.249.1036 does not have the expected behavior for attempts to delete Web SQL Databases and clear the Strict Transport Security (STS) state, which has unspecified impact and attack vectors.
network
low complexity
google CWE-200
critical
10.0
2010-04-01 CVE-2010-1229 Resource Management Errors vulnerability in Google Chrome
The sandbox infrastructure in Google Chrome before 4.1.249.1036 does not properly use pointers, which has unspecified impact and attack vectors.
network
low complexity
google CWE-399
critical
10.0
2010-04-01 CVE-2010-1228 Race Condition vulnerability in Google Chrome
Multiple race conditions in the sandbox infrastructure in Google Chrome before 4.1.249.1036 have unspecified impact and attack vectors.
network
low complexity
google CWE-362
critical
10.0
2010-02-18 CVE-2010-0659 Resource Management Errors vulnerability in multiple products
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.
network
apple google CWE-399
critical
9.3